BREAKING THE BACK BUTTON IS NOW GOOGLE SPAM.
Google has added "back button hijacking" to its spam policies. Most small business owners never wrote a line of code that does this, but a script, plugin or ad tag on their site might. Here is what Google says, and how to check your own site.
AT A GLANCE
By Conqueror Capital · Published
The change: Google announced the back button hijacking policy on April 13, 2026, with enforcement from June 15, 2026.1
WHAT CHANGED
On April 13, 2026, Google announced it was expanding its spam policies to address "back button hijacking", which it made an explicit violation of the malicious practices section of those policies.1 Google published the policy two months ahead of enforcement, which began on June 15, 2026.1
Google's spam policies now define it this way: back button hijacking is when a site interferes with user browser navigation by manipulating the browser history or other functionalities, preventing them from using their back button to immediately get back to the page they came from.2
Google also says that inserting deceptive or manipulative pages into a user's browser history has always been against Google Search Essentials, and that it has seen a rise in this behavior.1
WHAT IT LOOKS LIKE
Google describes the experience: instead of returning to the page they came from, users might be sent to pages they never visited, be shown unsolicited recommendations or ads, or otherwise be prevented from browsing normally.1
Google files it under malicious practices, which its policy describes as creating a mismatch between user expectations and the actual outcome, leading to a negative and deceptive user experience, or compromised user security or privacy.1
In plain terms, if someone taps back from your page on their phone and lands on a "before you go" offer, a page of recommended articles or an ad instead of the search results they came from, that is the pattern Google is describing.
WHAT GOOGLE CAN DO
Pages engaging in back button hijacking may be subject to manual spam actions or automated demotions, which Google says can impact the site's performance in Search results.1
If a manual action was applied and you have fixed the issue, Google says you can let it know by submitting a reconsideration request in Search Console.1
WHO IT AFFECTS
The part of Google's announcement that matters most for small businesses is this: some instances of back button hijacking may originate from the site's included libraries or advertising platform.1 So the business owner may not know it is happening. Sites worth checking:
- Sites with third-party scripts such as pop-up, exit-offer, chat, recommendation or ad widgets added over the years.
- Sites on builders or themes with many plugins, where features were switched on and forgotten.
- Sites that run display ads or content recommendation units, since Google names advertising platforms as a possible source.1
- Landing pages built by a vendor for ads or lead generation, which you may never have tested yourself.
Legitimate navigation isn't the target. Google's wording is about deceptive or manipulative pages that stop people getting back to where they came from.1
HOW TO CHECK YOUR SITE
- Search for your business on Google on your phone, tap your site, then tap back. You should land on the results page. Repeat from a service page and a blog or offer page.
- Do the same from an ad, if you run one, and from a page you reach by clicking around inside your site.
- Try a private browser window, because exit offers are often shown only to first-time visitors.
- List every script and plugin on the site: pop-ups, exit-intent offers, chat, ad networks, recommendation widgets. Ask whoever added each one what it does with browser history.
- Check Search Console for manual actions and messages. Our Search Console guide shows where to look.
WHAT TO DO NOW
- Remove or disable the cause. Google's instruction is to remove or disable any code, imports or configurations responsible for back button hijacking.1
- Talk to the vendor. If the behavior comes from an ad or widget provider, ask them to turn it off or remove their tag.
- Request reconsideration in Search Console if you had a manual action and have fixed the issue.1
- Keep the site lean. Fewer third-party scripts means fewer surprises. Our website checklist and speed guide cover what a small business site actually needs.
If you would rather hand this over, we build and maintain small business websites without exit traps or unnecessary scripts.
SOURCES
- Google Search Central Blog, Introducing a new spam policy for "back button hijacking", April 13, 2026.
- Google Search Central, Spam policies for Google web search, last updated August 28, 2026.
Platforms change often. Check the sources for the current version before acting.
KEEP READING
BOOK A STRATEGY CALL
Not sure what a platform change means for your business? Ask us on a 15-minute call.